github api-platform/core v4.1.30

latest releases: v4.3.13, v4.3.12, v4.2.26...
22 hours ago

🔒 Security

Fixes CVE-2026-54164 (GHSA-9rjg-x2p2-h68h) — type confusion: relation IRIs were not type-checked, so a writable relation could be assigned a resource of the wrong type.

  • fix(serializer): validate IRI target class on relation denormalization (6bcbeb2)

Full Changelog: v4.1.29...v4.1.30

Don't miss a new core release

NewReleases is sending notifications on new releases.